imperva.com

Issued by GlobalSign Atlas R3 DV TLS CA 2023 Q1

About this certificate

This digital certificate with serial number 01:8f:dd:96:b5:2f:d6:b2:27:01:8d:50:fc:d4:8c:0c was issued on by GlobalSign nv-sa.

With 45 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=imperva.com

GlobalSign nv-sa

Organization: GlobalSign nv-sa
Country: BE

This certificate has expire since

Certificate Details

Serial Number (hex): 01:8f:dd:96:b5:2f:d6:b2:27:01:8d:50:fc:d4:8c:0c
Serial Number (int): 2076220799376800546541806665692646412
Serial Number lenght: 121 bits, 16 octets

SubjectKeyId: fc:63:b8:2a:1a:e2:23:3f:3a:c1:20:18:6d:82:24:12:88:b6:8f:af
AuthorityKeyId: 4a:ee:a2:47:63:43:3b:3e:78:f3:b4:61:83:72:88:7a:9d:e4:bd:b7

Fingerprint (sha1): 97:29:c4:b6:c0:c5:d9:56:08:e2:6d:e3:cb:f9:1e:4c:28:bb:31:60
Fingerprint (sha256): 6a:9e:b8:65:d7:fa:03:c5:ea:ef:21:11:fe:7f:20:e8:55:14:51:f3:54:24:d1:57:b5:3b:8e:43:22:35:c6:0f

Issuing Certificate URL: http://secure.globalsign.com/cacert/gsatlasr3dvtlsca2023q1.crt

Revocation information

OCSP Server: http://ocsp.globalsign.com/ca/gsatlasr3dvtlsca2023q1
CRL Distribution Point: http://crl.globalsign.com/ca/gsatlasr3dvtlsca2023q1.crl

Check the revocation status for certificate imperva.com

45

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for imperva.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

*.albertsonsmediacollective.com
*.albertsonsmarket.com
*.vons.com
*.paknsave.safeway.com
*.andronicos.com
*.randalls.com
www-preview-beta.lucernefoods.com
www.unitedfamilybenefits.com
*.balduccis.com
*.carrsqc.com
*.albertsons.com
*.albertsons-cms.com
*.acmemarkets.com
*.tomthumb.com
sincerely-food.com
*.amigosunited.com
albertsonsmarket.com
www-qa1.lucernefoods.com
*.pinc.albertsons.com
imperva.com
amigosunited.com
andronicos.com
*.albertsonscompanies.com
*.haggen.com
www.amigosunited.com
*.luckylowprices.com
www-preview.lucernefoods.com
*.safewayphiltech.com
*.jewelosco.com
www-preview-stage.lucernefoods.com
*.starmarket.com
unitedfamilybenefits.com
*.marketstreetunited.com
*.safeway.com
*.shaws.com
*.pavilions.com
*.albertsons-media.com
*.sincerely-food.com
*.svwp-massmailer-acceptance.albertsons.com
*.unitedsupermarkets.com
safewayphiltech.com
www.raveonlbk.com
raveonlbk.com
*.kingsfoodmarkets.com
www.albertsonsmarket.com

Other certificates including the domain name imperva.com

(limited to 100 certificates)
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
incapsula.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
incapsula.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
incapsula.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com
imperva.com

Certificate

The complete raw certificate details for imperva.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIIKKzCCCROgAwIBAgIQAY/dlrUv1rInAY1Q/NSMDDANBgkqhkiG9w0BAQsFADBY
MQswCQYDVQQGEwJCRTEZMBcGA1UEChMQR2xvYmFsU2lnbiBudi1zYTEuMCwGA1UE
AxMlR2xvYmFsU2lnbiBBdGxhcyBSMyBEViBUTFMgQ0EgMjAyMyBRMTAeFw0yMzAz
MjQwMDAyNTdaFw0yMzA5MjAwMDAyNTdaMBYxFDASBgNVBAMMC2ltcGVydmEuY29t
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv0nNYIF4hwbhnsTCzfTW
JkiDa9HYmsmFlltENQfTUE5NAyqgHJCrF+T34yzZupCc587RX1M/6I2whNpAnvsL
j4Pjsb9OXvIPpbptrG99WpC3V/1utsClulo5CHrEPGe4QNgWmdq6WPtv9giRI0ML
KDF9GhFS6p1yXk3ti8LfgOH4gUhmgUhpyfYyAHgpWy5yrYiWCKvdOvnPTm7CLsoh
vxUjvVpsr8/8JOssa+KfKJ1xqg5tOixF3FbE73CSoloZ1DCl4g4cC20aLN4og72Q
pfNavr01hswph4A5fRjXYZY1LVj3hWSvKDOnJiq4smjfcShtLh7l/aJ6nXVZCvxq
owIDAQABo4IHMTCCBy0wggPmBgNVHREEggPdMIID2YIfKi5hbGJlcnRzb25zbWVk
aWFjb2xsZWN0aXZlLmNvbYIWKi5hbGJlcnRzb25zbWFya2V0LmNvbYIKKi52b25z
LmNvbYIWKi5wYWtuc2F2ZS5zYWZld2F5LmNvbYIQKi5hbmRyb25pY29zLmNvbYIO
Ki5yYW5kYWxscy5jb22CIXd3dy1wcmV2aWV3LWJldGEubHVjZXJuZWZvb2RzLmNv
bYIcd3d3LnVuaXRlZGZhbWlseWJlbmVmaXRzLmNvbYIPKi5iYWxkdWNjaXMuY29t
gg0qLmNhcnJzcWMuY29tghAqLmFsYmVydHNvbnMuY29tghQqLmFsYmVydHNvbnMt
Y21zLmNvbYIRKi5hY21lbWFya2V0cy5jb22CDioudG9tdGh1bWIuY29tghJzaW5j
ZXJlbHktZm9vZC5jb22CEiouYW1pZ29zdW5pdGVkLmNvbYIUYWxiZXJ0c29uc21h
cmtldC5jb22CGHd3dy1xYTEubHVjZXJuZWZvb2RzLmNvbYIVKi5waW5jLmFsYmVy
dHNvbnMuY29tggtpbXBlcnZhLmNvbYIQYW1pZ29zdW5pdGVkLmNvbYIOYW5kcm9u
aWNvcy5jb22CGSouYWxiZXJ0c29uc2NvbXBhbmllcy5jb22CDCouaGFnZ2VuLmNv
bYIUd3d3LmFtaWdvc3VuaXRlZC5jb22CFCoubHVja3lsb3dwcmljZXMuY29tghx3
d3ctcHJldmlldy5sdWNlcm5lZm9vZHMuY29tghUqLnNhZmV3YXlwaGlsdGVjaC5j
b22CDyouamV3ZWxvc2NvLmNvbYIid3d3LXByZXZpZXctc3RhZ2UubHVjZXJuZWZv
b2RzLmNvbYIQKi5zdGFybWFya2V0LmNvbYIYdW5pdGVkZmFtaWx5YmVuZWZpdHMu
Y29tghgqLm1hcmtldHN0cmVldHVuaXRlZC5jb22CDSouc2FmZXdheS5jb22CCyou
c2hhd3MuY29tgg8qLnBhdmlsaW9ucy5jb22CFiouYWxiZXJ0c29ucy1tZWRpYS5j
b22CFCouc2luY2VyZWx5LWZvb2QuY29tgisqLnN2d3AtbWFzc21haWxlci1hY2Nl
cHRhbmNlLmFsYmVydHNvbnMuY29tghgqLnVuaXRlZHN1cGVybWFya2V0cy5jb22C
E3NhZmV3YXlwaGlsdGVjaC5jb22CEXd3dy5yYXZlb25sYmsuY29tgg1yYXZlb25s
YmsuY29tghYqLmtpbmdzZm9vZG1hcmtldHMuY29tghh3d3cuYWxiZXJ0c29uc21h
cmtldC5jb20wDgYDVR0PAQH/BAQDAgWgMB0GA1UdJQQWMBQGCCsGAQUFBwMBBggr
BgEFBQcDAjAdBgNVHQ4EFgQU/GO4KhriIz86wSAYbYIkEoi2j68wVwYDVR0gBFAw
TjAIBgZngQwBAgEwQgYKKwYBBAGgMgoBAzA0MDIGCCsGAQUFBwIBFiZodHRwczov
L3d3dy5nbG9iYWxzaWduLmNvbS9yZXBvc2l0b3J5LzAMBgNVHRMBAf8EAjAAMIGe
BggrBgEFBQcBAQSBkTCBjjBABggrBgEFBQcwAYY0aHR0cDovL29jc3AuZ2xvYmFs
c2lnbi5jb20vY2EvZ3NhdGxhc3IzZHZ0bHNjYTIwMjNxMTBKBggrBgEFBQcwAoY+
aHR0cDovL3NlY3VyZS5nbG9iYWxzaWduLmNvbS9jYWNlcnQvZ3NhdGxhc3IzZHZ0
bHNjYTIwMjNxMS5jcnQwHwYDVR0jBBgwFoAUSu6iR2NDOz5487Rhg3KIep3kvbcw
SAYDVR0fBEEwPzA9oDugOYY3aHR0cDovL2NybC5nbG9iYWxzaWduLmNvbS9jYS9n
c2F0bGFzcjNkdnRsc2NhMjAyM3ExLmNybDCCAX4GCisGAQQB1nkCBAIEggFuBIIB
agFoAHYArfe++nz/EMiLnT2cHj4YarRnKV3PsQwkyoWGNOvcgooAAAGHEO1cBgAA
BAMARzBFAiEAgdH26vjNYP9Yg2WrkPLU4KMwNEN03FcsR56yZSfZkIwCIA0U5Fx6
VbBrY+UVedRTdUPIVEyXi9P85aCoPPoJug6VAHYA6D7Q2j71BjUy51covIlryQPT
y9ERa+zraeF3fW0GvW4AAAGHEO1cMwAABAMARzBFAiEAu9+FvU+1cmIIiyWB0Stz
ImF94yIhkETVKYsyWdtGCXUCIDoVBf4cfdYAZ9dRrGqohrnY9bQHnCz7z/UbCN9z
dgUEAHYAs3N3B+GEUPhjhtYFqdwRCUp5LbFnDAuH3PADDnk2pZoAAAGHEO1dYAAA
BAMARzBFAiARAE7EYC7dznFM6wdkXuoWuiR17PRhhTx+nfQBmV05fQIhALF4O2A/
glvV15y6FyQSwTB++4tWfY/3KqQjvL//WJw/MA0GCSqGSIb3DQEBCwUAA4IBAQAH
6e6Wsm+zffq9ou7t4tQkt+JH6HC0gGsp+IOO6V6KspC6kwjftiM5xVCgWQH5hbiK
/1nlN6fdY0xn9DqiLgi26TbC1GEE0KZL10oGg+/SUlQcIdI835niuXQaenOTGstL
lLVY7vmu5ukEroviDKA5C/U60urGhxer5AnOwmD7QdYwe+ZoXkRXqUXtiOWF96SZ
wj9lqwtm/+1b9RZXZQIrMc2ftrbyeUSxbQ/IEz3Ua6Os85Gyl9UVeOYucsXE7zi9
d0R4LVQ+QOY9eC75VEDBC+rb/HTHV7hTfSye46uzMIHtTbReYxQD+rfowBKDmkAf
zDlq+Sp3RN3AiOj+Nmng
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv0nNYIF4hwbhnsTCzfTW
JkiDa9HYmsmFlltENQfTUE5NAyqgHJCrF+T34yzZupCc587RX1M/6I2whNpAnvsL
j4Pjsb9OXvIPpbptrG99WpC3V/1utsClulo5CHrEPGe4QNgWmdq6WPtv9giRI0ML
KDF9GhFS6p1yXk3ti8LfgOH4gUhmgUhpyfYyAHgpWy5yrYiWCKvdOvnPTm7CLsoh
vxUjvVpsr8/8JOssa+KfKJ1xqg5tOixF3FbE73CSoloZ1DCl4g4cC20aLN4og72Q
pfNavr01hswph4A5fRjXYZY1LVj3hWSvKDOnJiq4smjfcShtLh7l/aJ6nXVZCvxq
owIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 2076220799376800546541806665692646412
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'BE'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GlobalSign nv-sa'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GlobalSign Atlas R3 DV TLS CA 2023 Q1'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-03-24 00:02:57 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-09-20 00:02:57 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'imperva.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 24147909496266226948560613008403275843387405079135514180266375337424827635084823216024302990313294842748415672890253892335849800506850221060105378714278501541675236383530276222033984270914594913169075601867983767796779235390576614804229433155909574059515794232005094970344530360675487399529445405592222723158469568874819127044693427315304832310782574423157478104161350279837542915543413190211659350677296718926094289836829770698606412320545159342689097832682414294331031545851031788439971611133083118323252130450931765520683442635550558758535051739316432337177546840772269132880530950820470682554317339328242624785059
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (989 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.albertsonsmediacollective.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.albertsonsmarket.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.vons.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.paknsave.safeway.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.andronicos.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.randalls.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www-preview-beta.lucernefoods.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.unitedfamilybenefits.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.balduccis.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.carrsqc.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.albertsons.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.albertsons-cms.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.acmemarkets.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.tomthumb.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sincerely-food.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.amigosunited.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'albertsonsmarket.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www-qa1.lucernefoods.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.pinc.albertsons.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'imperva.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'amigosunited.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'andronicos.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.albertsonscompanies.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.haggen.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.amigosunited.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.luckylowprices.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www-preview.lucernefoods.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.safewayphiltech.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.jewelosco.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www-preview-stage.lucernefoods.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.starmarket.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'unitedfamilybenefits.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.marketstreetunited.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.safeway.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.shaws.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.pavilions.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.albertsons-media.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.sincerely-food.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.svwp-massmailer-acceptance.albertsons.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.unitedsupermarkets.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'safewayphiltech.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.raveonlbk.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'raveonlbk.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.kingsfoodmarkets.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.albertsonsmarket.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							fc63b82a1ae2233f3ac120186d82241288b68faf
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (80 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.4146.10.1.3
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.globalsign.com/repository/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (145 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.globalsign.com/ca/gsatlasr3dvtlsca2023q1'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://secure.globalsign.com/cacert/gsatlasr3dvtlsca2023q1.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 4aeea24763433b3e78f3b4618372887a9de4bdb7
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (65 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.globalsign.com/ca/gsatlasr3dvtlsca2023q1.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (366 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (362 bytes)
							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
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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